CODEWITHSUNDEEP
asp.net-mvc-4asp.net-web-apiforms-authentication
ncbl
ncbl

Reputation: 1295

Forms Authenticated Web APIs and jQuery

I have an issue that I am seriously struggling with.

I have a website, and a separate WebAPI which I want to be able to authenticate against each other. I was thinking that forms authentication would be best here. However, on my website, how do I go about calling the forms authenticated webAPI via a jQuery AJAX call?

Does anyone have any links or suggestions?

Upvotes: 0

Views: 1409

Answers (1)

Kevin Junghans
Kevin Junghans

Reputation: 17540

There is a discussion in this blog post on mixing forms authentication and basic authentication in Web API. You may be able to leverage some the principles in this article although it was tested with the Web API's residing on the same server as the web application.

If you keep the Web API and web application on separate servers your web application will run into cross domain issues and will have to support JSONP in your Web API. A possible work around for your website is to create a Web API locally on your web server which is just a facade to the Web API on the remote server. You incorporate the standard security methods on the local Web API, using AuthorizeAttribute, which in turn just calls your the Web API on the remote server. You can incorporate whatever security method you want to have for external users on the remote Web API.

Upvotes: 1

Related Questions